Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8900DD4CF60811EC97AFF47DF1222468.roa
File: 8900DD4CF60811EC97AFF47DF1222468.roa (raw, json)
Hash identifier: 1MJ7ujsxB29vpqyF2e7UAMWIgvNknUpgY+w/UsBH4Ys=
Subject key identifier: 10:16:F1:78:E6:5E:BB:AB:A7:0E:A8:41:1F:25:19:46:3D:9F:28:0B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 077C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8900DD4CF60811EC97AFF47DF1222468.roa
Signing time: Mon 27 Jun 2022 11:01:46 +0000
ROA not before: Mon 27 Jun 2022 11:01:42 +0000
ROA not after: Tue 27 Jun 2023 11:01:42 +0000
asID: 203999
IP address blocks: 161.123.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916 (0x77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 27 11:01:42 2022 GMT
Not After : Jun 27 11:01:42 2023 GMT
Subject: CN=62b98e1a-88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d2:be:fb:ba:f0:4a:2b:76:fb:6e:15:39:49:
ae:48:7f:f6:9d:b7:61:cd:20:41:fa:6f:c8:30:3a:
87:ac:32:5d:bf:61:8e:e4:21:cc:2e:c0:a0:f5:6d:
d1:cd:de:a3:11:9c:d7:ec:4d:f7:e2:b7:22:7c:7d:
b5:16:a2:d3:88:4c:06:c1:89:55:84:cd:6b:9f:60:
66:f9:c4:54:fa:05:24:e7:6d:17:1a:d3:83:87:e7:
8f:e2:d4:a4:ef:32:ec:7a:01:b6:1e:53:c6:25:6b:
6c:d0:00:f8:f6:51:2b:03:06:e9:bc:af:fa:d9:40:
0b:d0:66:a1:93:0d:57:a5:37:13:8c:93:f4:fb:d8:
d2:29:91:ad:74:6c:44:5c:a0:dd:75:4f:38:e9:7a:
b0:f6:31:ca:e2:a4:1e:f0:b3:05:aa:c1:5d:ca:13:
bd:76:fa:20:c8:c9:9a:f5:d4:e8:90:72:10:85:38:
57:34:db:d2:c5:69:5f:9d:71:ab:d5:95:00:cf:e5:
a5:d2:dc:3c:7f:a8:c0:7d:ce:f5:0a:fe:52:2b:e3:
2c:d8:40:73:30:6b:25:d5:75:e7:db:c9:43:03:34:
4e:af:2e:b3:81:da:20:fe:40:82:c5:ee:9d:b1:6a:
c6:ed:08:23:81:50:cf:e4:4f:ff:dc:01:89:b3:af:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:F1:78:E6:5E:BB:AB:A7:0E:A8:41:1F:25:19:46:3D:9F:28:0B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8900DD4CF60811EC97AFF47DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.72.0/22
Signature Algorithm: sha256WithRSAEncryption
43:82:f0:78:df:0c:55:8e:6b:3e:44:52:a1:60:d5:3e:ed:25:
26:46:70:75:12:f2:93:6a:88:4a:3a:86:59:4d:dd:c9:f4:99:
95:6b:50:f6:6f:cc:96:2e:b0:54:b9:91:0d:e8:34:3e:c9:75:
0e:f0:36:e6:a5:04:20:62:38:03:17:38:fc:0e:ec:ce:d2:67:
fb:e6:a1:f0:05:66:de:be:b6:56:c9:0c:1c:ad:8b:e7:67:bf:
77:ab:48:f8:62:48:6c:53:52:cc:76:22:10:86:b5:c4:9a:e8:
cf:9b:b7:8c:6a:dd:00:4a:a8:29:92:7e:cb:7f:c9:eb:85:04:
dc:7d:d3:a9:b8:66:2f:09:b9:4c:4a:5b:be:ea:18:3b:23:67:
ad:61:84:b8:d5:c8:c8:50:0d:10:11:ad:78:57:39:d4:af:0d:
d4:a3:89:3c:81:a2:0e:e2:5e:54:84:11:a1:71:14:44:88:63:
46:59:1f:bb:a4:01:d0:97:84:fc:87:d1:a4:65:38:5a:d9:c9:
49:82:6e:dd:47:92:d7:9b:04:e0:c4:ea:25:86:80:80:cd:ad:
04:69:55:71:9d:fe:66:6c:56:21:2f:ef:2b:0f:5a:99:f4:b1:
05:a4:c4:d8:09:7f:42:be:51:39:85:14:19:f4:6a:9f:1b:de:
dc:47:58:30
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB3wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MjcxMTAxNDJaFw0yMzA2MjcxMTAxNDJaMBgxFjAU
BgNVBAMMDTYyYjk4ZTFhLTg4YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD30r77uvBKK3b7bhU5Sa5If/adt2HNIEH6b8gwOoesMl2/YY7kIcwuwKD1
bdHN3qMRnNfsTffityJ8fbUWotOITAbBiVWEzWufYGb5xFT6BSTnbRca04OH54/i
1KTvMux6AbYeU8Yla2zQAPj2USsDBum8r/rZQAvQZqGTDVelNxOMk/T72NIpka10
bERcoN11TzjperD2McripB7wswWqwV3KE712+iDIyZr11OiQchCFOFc029LFaV+d
cavVlQDP5aXS3Dx/qMB9zvUK/lIr4yzYQHMwayXVdefbyUMDNE6vLrOB2iD+QILF
7p2xasbtCCOBUM/kT//cAYmzrw/NAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEBbx
eOZeu6unDqhBHyUZRj2fKAswHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzg5MDBERDRDRjYwODExRUM5N0FGRjQ3REYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe0gwDQYJKoZIhvcNAQELBQAD
ggEBAEOC8HjfDFWOaz5EUqFg1T7tJSZGcHUS8pNqiEo6hllN3cn0mZVrUPZvzJYu
sFS5kQ3oND7JdQ7wNualBCBiOAMXOPwO7M7SZ/vmofAFZt6+tlbJDByti+dnv3er
SPhiSGxTUsx2IhCGtcSa6M+bt4xq3QBKqCmSfst/yeuFBNx906m4Zi8JuUxKW77q
GDsjZ61hhLjVyMhQDRARrXhXOdSvDdSjiTyBog7iXlSEEaFxFESIY0ZZH7ukAdCX
hPyH0aRlOFrZyUmCbt1HktebBODE6iWGgIDNrQRpVXGd/mZsViEv7ysPWpn0sQWk
xNgJf0K+UTmFFBn0ap8b3txHWDA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org